| Max CVSS | 7.5 | Min CVSS | 7.5 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2016-7784 | 7.5 |
SQL injection vulnerability in the getSection function in framework/core/subsystems/expRouter.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL commands via the section parameter.
|
28-07-2017 - 01:29 | 07-03-2017 - 16:59 | |
| CVE-2016-9020 | 7.5 |
SQL injection vulnerability in framework/modules/help/controllers/helpController.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL commands via the version parameter.
|
04-04-2017 - 01:59 | 07-03-2017 - 16:59 | |
| CVE-2016-9087 | 7.5 |
SQL injection vulnerability in framework/modules/filedownloads/controllers/filedownloadController.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL commands via the fileid parameter.
|
04-04-2017 - 01:59 | 07-03-2017 - 16:59 | |
| CVE-2016-7789 | 7.5 |
SQL injection vulnerability in framework/core/models/expConfig.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL commands via the apikey parameter.
|
01-04-2017 - 01:59 | 07-03-2017 - 16:59 | |
| CVE-2016-9019 | 7.5 |
SQL injection vulnerability in the activate_address function in framework/modules/addressbook/controllers/addressController.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL commands via the is_what parameter.
|
01-04-2017 - 01:59 | 07-03-2017 - 16:59 | |
| CVE-2016-7788 | 7.5 |
SQL injection vulnerability in framework/modules/users/models/user.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter.
|
01-04-2017 - 01:59 | 07-03-2017 - 16:59 | |
| CVE-2016-7781 | 7.5 |
SQL injection vulnerability in framework/modules/blog/controllers/blogController.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL commands via the author parameter.
|
31-03-2017 - 01:59 | 07-03-2017 - 16:59 | |
| CVE-2016-7780 | 7.5 |
SQL injection vulnerability in cron/find_help.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL commands via the version parameter.
|
31-03-2017 - 01:59 | 07-03-2017 - 16:59 | |
| CVE-2016-7782 | 7.5 |
SQL injection vulnerability in framework/core/models/expConfig.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL commands via the src parameter.
|
31-03-2017 - 01:59 | 07-03-2017 - 16:59 | |
| CVE-2016-7783 | 7.5 |
SQL injection vulnerability in framework/core/models/expRecord.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL commands via the title parameter.
|
31-03-2017 - 01:59 | 07-03-2017 - 16:59 |